Trust Center
What due diligence asks, already answered.
Every sale to a large or regulated company goes through a vendor questionnaire. This page is the answer given in advance, written once and kept online, so the commercial cycle does not spend three weeks repeating by email what fits on one page.
Updated 09/2026
The short answers
Four questions, four lines.
- Where does customer data live?
- Every provider that processes customer data is listed below, with its country. Contract, personal data processing and venue follow Brazilian law.
- Can one organisation see another?
- No. Isolation runs as an automated test on every change, not as a contract clause.
- What does the AI do with customer data?
- Every call goes through a single point, is logged and asks the provider not to retain or train on the content. No output changes a score or a number without a person accepting it.
- What is the certification calendar?
- It is published below, with a target quarter for each one. The technical posture they will audit is already documented on this page.
01Residency and sovereignty
Where the data rests is written down.
For an institution under CMN 5.274 and the LGPD, the question of where data rests is a disqualifier, not a curiosity. The answer is written here, provider by provider, not available on request in a meeting.
- Contract, personal data processing and venue under Brazilian law.
- Every provider that processes customer data is in the subprocessor list, with its country.
- International transfer, when it exists, is declared with the provider, the country and the legal mechanism.
02Isolation and access
Who gets in, when, and with what trace.
Isolation by organisation is a rule Indene does not negotiate, and a breach of it is treated as a severe incident. Our team accessing a customer environment is the exception, not the routine.
- Isolation is enforced in the database (row-level security), with few exceptions, all named and covered by tests.
- Indene team access is individual, with a mandatory second factor, and recorded in an immutable platform trail.
- Connector credentials are stored encrypted at rest and never displayed after being saved.
03Trail and retention
Five years, because the rule says five years.
Scores, evidence, decisions and exports write an immutable trail with author, date and previous value. That is what allows us to answer supervisors without manual collection, and why retention is not negotiable downwards.
- Trail and evidence retention aligned with the five years of CMN 5.274 and BCB 538.
- The statement of applicability comes out per framework, with the origin of every proof.
- Personal data outside the trail follows the privacy policy and the data subject request.
04Continuity and reversibility
What happens if Indene stops.
A new vendor has to answer the question nobody likes to ask. The honest answer today is a contractual commitment, and it is written down before being demanded.
- Full export of the organisation data, in an open format, at any time.
- A recovery window for the exportable data guaranteed by contract after termination.
- What holds up the number is the customer evidence: leaving Indene does not erase their proof.
Subprocessors
Who else touches the data.
The third parties that process data on behalf of Indene, for what and where. It is the first table a customer legal team asks for and the one almost no vendor publishes before being asked.
| Vendor | For what | Where |
|---|---|---|
| Site and sales contact | ||
| Cloudflare | Hosting for the site and the edge, attack protection and access logs. | Brasil · borda global |
| OpenPanel | Aggregate site usage metrics, without cookies and without personal identification. | União Europeia |
| Twenty CRM | Record of commercial contact submitted through the form. | Brasil · instância própria |
| Indene internal operations | ||
| Cloudflare (R2) | Storage for files uploaded to Indene's internal platform: documents, receipts and résumés, including those from applications made on this site.Data: Uploaded documents, résumés and payment receipts | United States |
| OpenRouter | Routing of the internal platform's AI assistant calls. Submitted content is neither stored by the platform nor used to train models.Data: Content submitted to the assistant | United States |
| Resend | Transactional e-mail delivery: sign-in codes, notifications and system alerts.Data: Name and e-mail address | United States |
The list combines the site vendors with those of Indene's internal operations, which receive, for example, the résumé sent through the careers page. Product vendors are added here, with country and purpose, before any customer processes real data on the platform. Changes to this list are communicated to customers before they take effect.
Certifications and independent audit
A public calendar, with dates.
Each certification has a target quarter and a status visible before it is complete. The calendar stays public so it can be held to.
- Teste de intrusão por terceiroplanned · target Q2 2027
- ISO/IEC 27001planned · target Q4 2027
- SOC 2 Type IIplanned · target Q2 2028
- ISO 22301planned · target Q4 2028
The technical posture that underpins the process is already published and can be verified today, before any auditor walks in.
Data protection officer
One channel, one accountable team.
The LGPD requires naming a data protection officer and publishing the contact channel. The channel below receives data subject requests, vendor questionnaires and deletion requests.
- Data protection officer (DPO)
- The Indene privacy team
- dpo@indene.io
Due diligence
Need the full package?
Vendor questionnaire answered, information security policy, continuity plan and the architecture design. We send it within two business days, under a confidentiality agreement when your process requires one.